Configuring the Switch

3-146

3
CLI – This example sets port 3 to accept only tagged frames, assigns P VID 3 as the
native VLAN ID, enables GV RP, sets the GARP timers, and then s ets the switchport
mode to hybrid.

Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports within the
assigned VLAN. Data traffic on downlink ports can only be forwarded to, and from,
uplink ports. (Note that private VLANs and normal VLANs can e xist simultaneously
within the same switch.)

Enabling Private VLANs

Use the Private VLAN Status page to enable/disable the Private VLAN function.
Web – Click VLAN, Private VLAN, Status. Select Enable or Disable from the
scroll-down box, and click Apply.
Figure3-81 Privat e VLAN Status
CLI – This example enables private VLANs.
Console(config)#interface ethernet 1/3 4-143
Console(config-if)#switchport acceptable-frame-types tagged 4-192
Console(config-if)#switchport ingress-filtering 4-192
Console(config-if)#switchport native vlan 3 4-193
Console(config-if)#switchport gvrp 4-203
Console(config-if)#garp timer join 20 4-204
Console(config-if)#garp timer leave 90
Console(config-if)#garp timer leaveall 2000
Console(config-if)#switchport mode hybrid 4-191
Console(config-if)#
Console(config)#pvlan 4-197
Console(config)#
UplinkPorts
PrimaryVLAN
(promiscuousports)
x
DownlinkPorts
SecondaryVLAN
(privateports)